CVE-2023-41597

MEDIUMNuclei

EyouCms v1.6.2 - Cross-Site Scripting

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2023-41597 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /admin/twitter.php?active_t.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 29, 2024 · Source: CVE List

Nuclei templates

1
ProjectDiscoveryMEDIUMEyouCms v1.6.2 - Cross-Site ScriptingCVSS 6.1

EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /admin/twitter.php?active_t.

Impact

Allows attackers to execute malicious scripts in the context of a victim's browser session.

Remediation

Implement proper input validation and output encoding to prevent XSS attacks.

WeaknessesCWE-79
Authorsritikchaddha
Template tagscvecve2023eyoucmsxssvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:eyoucms:eyoucms:1.6.2:*:*:*:*:*:*:*
FOFA: icon_hash="-614262549"
FOFA: title="eyoucms"

Source: ProjectDiscovery

References

2